Check Point External Risk Management

C tier on Attack Surface Management SoftwareScore 6.6 · #8 of 28

Android app: Not listed
Free plan: No
Runs on: api, Browser extension, Linux, Mac, Web, Windows

checkpoint.com

Summary

Check Point External Risk Management is a cloud-based service for discovering and reducing risks affecting an organization’s internet-facing assets. It identifies assets across brands, cloud environments, and suppliers, then analyzes vulnerabilities and misconfigurations, correlates findings with threat intelligence, and scores risks for prioritization. Continuous monitoring and recurring assessments help surface weaknesses for remediation. Teams receive prioritized recommendations and a roadmap for remediation and hardening, along with a compliance and regulatory alignment review. Coverage combines threat intelligence, deep and dark web monitoring, external attack surface management, digital risk protection, and supply-chain intelligence. Check Point experts can provide investigations, threat reports, phishing-site and social-profile takedowns, red-team exercises, and attack simulations. The agentless SaaS service offers Essential and Advanced packages. Essential includes one regular user, one out-of-the-box integration, weekly scans, and 20 remediation coins; Advanced includes three regular users, two integrations, daily scans, and 100 remediation coins. A Microsoft Sentinel connector synchronizes alerts and can trigger SOAR playbooks. Custom integrations can use a REST API. Pricing is on request, and package licensing is based mainly on external-facing asset counts, with additional assets available as add-ons.

Who it is for

The service is relevant to CISOs, SOC managers, incident-response professionals, and red teams. It suits organizations seeking visibility into external assets and prioritized exposure remediation.

What is good

Discovers assets across brands, cloud, and suppliers.
Correlates vulnerabilities with threat intelligence.
Provides prioritized remediation recommendations.
Offers a Microsoft Sentinel connector and REST API.
Includes weekly or daily exposure scans by package.

What to know first

Pricing is available on request.
Licensing depends mainly on external-facing asset counts.
Additional external assets or threat-intelligence assets are add-ons.

Verdict

Check Point External Risk Management combines external asset discovery, risk prioritization, and remediation guidance with optional expert services. Compare package allowances and asset-based licensing with the scope of your organization’s exposure.

Check Point External Risk Management plans and pricing

All plans

Infinity External Risk Management Essential Package Not published 1 regular user · 1 out-of-the-box integration · weekly exposure scans · 20 remediation coins sc1.checkpoint.com · 7 Oct 2026

Infinity External Risk Management Advanced Package Not published 3 regular users · 2 out-of-the-box integrations · daily exposure scans · 100 remediation coins sc1.checkpoint.com · 7 Oct 2026

Compared on attack surface management software

External asset discovery: Yescheckpoint.com
Cloud asset discovery: Yescheckpoint.com
Monitoring frequency: continuouscheckpoint.com
API access: Yescheckpoint.com

Facts

Purpose: External Risk Management continuously discovers external threats and vulnerabilities and provides contextual insight and active testing to reduce exposure.checkpoint.com · 7 Oct 2026
Attack surface: The service reveals internet-facing assets across brands, cloud environments, and suppliers.checkpoint.com · 7 Oct 2026
Risk prioritization: Its process includes vulnerability and misconfiguration analysis, threat-intelligence correlation, risk scoring, and prioritization.checkpoint.com · 7 Oct 2026
Assessments: The service uses recurring assessments and testing to find new weaknesses and reduce the time they remain exposed.checkpoint.com · 7 Oct 2026
Remediation guidance: Check Point provides prioritized recommendations and a roadmap with practical steps for remediation and hardening.checkpoint.com · 7 Oct 2026
Managed services: Check Point experts can provide phishing-site and social-profile takedowns, investigations, threat reports, red-team exercises, and attack simulation.checkpoint.com · 7 Oct 2026
Integration: The Check Point External Risk Management connector for Microsoft Sentinel synchronizes alerts and can trigger Sentinel SOAR playbooks for automated remediation.checkpoint.com · 7 Oct 2026
Supported API: A Check Point ERM datasheet describes custom integrations using a REST API.community.checkpoint.com · 7 Oct 2026
Security coverage: The solution combines threat intelligence, deep and dark web monitoring, external attack surface management, digital risk protection, and supply-chain intelligence.checkpoint.com · 7 Oct 2026
Deployment: The solution brief describes Infinity External Risk Management as an agentless, cloud-based SaaS solution that can be deployed within minutes.checkpoint.com · 7 Oct 2026
Compliance: The service includes a compliance and regulatory alignment review and says its recommendations can help improve compliance readiness.checkpoint.com · 7 Oct 2026
Support: The Essential and Advanced package sheets specify Direct Premium support SLA; the Essential sheet lists yearly customer-success-manager cadence and the Advanced sheet quarterly cadence.sc1.checkpoint.com · 7 Oct 2026
Notable limit: Package licensing is based mainly on the number of external-facing assets, with additional external assets or threat-intelligence assets available as add-ons.sc1.checkpoint.com · 7 Oct 2026
Intended users: The service page names CISOs, SOC managers, incident-response professionals, and red teams as relevant roles.checkpoint.com · 7 Oct 2026